anubis | aaeef43016c670bf7936012cd592148e16facb714d66dd8c9df1a0acdf50423c | Triage

Analysis

max time kernel
2548725s
max time network
132s
platform
android_x64
resource
android-x64-20220621-en
submitted
24-06-2022 22:46

Sharing

Report Analysis Logs

General

Target

aaeef43016c670bf7936012cd592148e16facb714d66dd8c9df1a0acdf50423c.apk
Size

615KB
MD5

afeca787847ff9c0ab093726d7c644b4
SHA1

8e84994a9dc3947b539e8a03ce1427ef6688046a
SHA256

aaeef43016c670bf7936012cd592148e16facb714d66dd8c9df1a0acdf50423c
SHA512

aab57de36dafb02ba819ef49e2d7497809a39d183425e737576d4e889846e78494af6b35d6c815834d6c280695485ff1731ce81405738ada85013c4ad7df275c

Score

10^/10

anubis banker evasion infostealer trojan

Malware Config

Signatures

Anubis banker
Android banker that uses overlays.
banker trojan infostealer anubis
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
evasion

Processes:

anubis.bot.myapplication

description ioc process

Framework API call android.hardware.SensorManager.registerListener anubis.bot.myapplication

anubis.bot.myapplication
1⤵
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:5564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...